On Fri, 22 Aug 2008, Serge E. Hallyn wrote: > In August 2006 I posted a patch to the selinux list generating a minimal > SELinux policy. This week, David P. Quigley posted an updated version > of that as a patch against the kernel. In addition to some fixes, also > had nice logic for auto-installing the policy. > > I've gone ahead and hooked it into the kernel Makefile logic. The way I > have it here, doing 'make scripts' ends up compiling 'mdp', after which > you must > cd scripts/selinux > sh install_policy.sh > > That isn't as nice as being able to do > make selinux_install > the way David had it, but it avoids mucking with the top-level > Makefile. Which is preferred? I think leaving out of the top level makefile is preferred, as there are no other subsystem targets there. Please make sure 'make distclean' cleans up properly. These are currently left behind: # scripts/selinux/mdp/file_contexts # scripts/selinux/mdp/policy.23 # scripts/selinux/mdp/policy.conf Please also provide documentation on how to boot the system up with this policy. > + echo "no file contests file. Please run" ITYM contexts :-) - James -- James Morris <jmorris@xxxxxxxxx> -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
